@runuai/host 0.9.109 → 0.9.110
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/agents/grok.ts +11 -1
- package/package.json +1 -1
package/lib/agents/grok.ts
CHANGED
|
@@ -183,7 +183,17 @@ export class GrokSession implements AgentSession {
|
|
|
183
183
|
argv: argv as [string, ...string[]],
|
|
184
184
|
user: "node",
|
|
185
185
|
inheritEnv,
|
|
186
|
-
env:
|
|
186
|
+
env: {
|
|
187
|
+
...this.agentEnv,
|
|
188
|
+
// Grok gates MCP/LSP servers (even user-scope ones) behind folder
|
|
189
|
+
// trust, and /workspace is never trusted: it is not a git repo and
|
|
190
|
+
// headless runs have no prompt. `grok mcp doctor` on a task machine:
|
|
191
|
+
// "folder untrusted … not started for an untrusted folder"; with this
|
|
192
|
+
// off, "2 healthy". The container/machine IS the isolation boundary —
|
|
193
|
+
// the same reasoning as --permission-mode bypassPermissions above
|
|
194
|
+
// (live 2026-09-08, first Grok agents with MCP servers).
|
|
195
|
+
GROK_FOLDER_TRUST: "0",
|
|
196
|
+
},
|
|
187
197
|
maxOutputBytes: AGENT_SESSION_OUTPUT_BUFFER_BYTES,
|
|
188
198
|
};
|
|
189
199
|
}
|